ISACA Foundation

ISACA Foundation is a nonprofit philanthropic organization associated with professional ISACA that supports research, education, scholarships, and capacity building in areas related to information technology, cybersecurity, information assurance, privacy law, and risk management. The Foundation funds scholarships and grants, commissions studies, and convenes experts to advance practices used by practitioners in industries such as financial services, healthcare, telecommunications, manufacturing, and government auditing. It engages with stakeholders including standards bodies, academic institutions, certification providers, and international development organizations.

History

The Foundation emerged in the early 2010s amid growing demand for workforce development and evidence-based policy in information security, IT audit, and governance, risk, and compliance practices. Its origins intersect with initiatives from ISACA chapters and global conferences such as World Congress on Information Technology and collaborations with research centers at universities including Carnegie Mellon University, Massachusetts Institute of Technology, Stanford University, University of Oxford, and University of Cambridge. Early grant recipients included programs linked to National Institute of Standards and Technology, European Union Agency for Cybersecurity, and regional consortia in Asia, Africa, and Latin America. Over time, the Foundation supported longitudinal studies that referenced frameworks like COBIT, NIST Cybersecurity Framework, and ISO/IEC 27001 while partnering with think tanks such as RAND Corporation, Brookings Institution, and Center for Strategic and International Studies.

Mission and Activities

The Foundation’s mission centers on expanding access to education, research, and workforce development for professions in information technology audit, cybersecurity operations, privacy management, and risk assurance. Activities commonly include awarding scholarships to candidates pursuing certifications from bodies like ISACA and (ISC)², funding academic research at institutions such as Georgia Institute of Technology, University of Illinois Urbana–Champaign, and University of Texas at Austin, and sponsoring conferences including RSA Conference, Black Hat, and Gartner Security & Risk Management Summit. The Foundation also commissions white papers and empirical analyses that inform policy debates in forums like United Nations, World Bank, and Organisation for Economic Co-operation and Development.

Governance and Funding

Governance structures typically involve a volunteer board composed of senior professionals from Big Four firms, multinational corporations, and academic leaders from entities such as Harvard University, Columbia University, and University of California, Berkeley. Financial support derives from endowments, corporate donations from firms like Deloitte, PwC, KPMG, Ernst & Young, and technology vendors including Microsoft, IBM, Cisco Systems, Amazon Web Services, along with proceeds from professional certification programs and chapter fundraising. Grant-making follows policies aligned with nonprofit oversight found in jurisdictions such as United States Internal Revenue Service regulations and governance recommendations from Committee of Sponsoring Organizations of the Treadway Commission. Transparency is maintained through annual reports and audits often prepared by accounting firms active in financial auditing.

Programs and Initiatives

Signature programs encompass scholarship funds for students and professionals pursuing credentials in fields related to information systems audit and cybersecurity engineering, fellowship programs that place researchers with organizations like SANS Institute and Centre for Internet Security, and grant competitions for applied research on topics such as cloud computing, Internet of Things, critical infrastructure protection, and digital forensics. Capacity-building initiatives include online curricula developed with partners like Coursera, edX, and Udacity, and mentorship networks modeled after programs at IEEE and ACM. The Foundation has supported initiatives to increase diversity and inclusion, echoing efforts by organizations such as Girls Who Code, Black Girls CODE, and Women in CyberSecurity. Evaluation of outcomes leverages methods used in studies from Pew Research Center and McKinsey & Company to assess workforce gaps and policy impacts.

Partnerships and Impact

Partnerships span standards organizations, academic consortia, and multinational development agencies—examples include collaborations with ISO, Institute of Electrical and Electronics Engineers, NIST, European Commission, United Nations Development Programme, and regional bodies such as African Union and ASEAN. Impact metrics reported by the Foundation typically cite numbers of scholarships awarded, research grants funded, practitioners trained, and policy briefs produced that have influenced standards adoption in sectors regulated by entities like Securities and Exchange Commission (United States), European Data Protection Board, and national cybersecurity agencies. Case studies highlight contributions to workforce pipelines feeding employers such as Google, Apple, Microsoft, JPMorgan Chase, and Bank of America, and to public-sector modernization projects in jurisdictions including United Kingdom, Canada, Germany, India, and Australia. The Foundation’s role in convening multidisciplinary stakeholders continues to shape dialogues at summits like Cybersecurity Expo and cross-sector initiatives addressing emerging challenges in quantum computing and artificial intelligence safety.

Category:Non-profit organizations